Federation Security Services Guide › Overview of a SiteMinder Federation Partnership Setup › Set Up Consuming Authority Components › Configure Federation Web Services (Consuming-side)

Configure Federation Web Services (Consuming-side)

These steps enable you to set up the Federation Web Services application. The Federation Web Services application is installed on the server with the Web Agent Option Pack or the SPS federation gateway.

To configure Federation Web Services at the consuming authority

1. Configure one of the following if you are using the Web Agent Option Pack:
   • A web server running ServletExec to run Federation Web Services
   • WebLogic Application Server and deploy Federation Web Services
   • WebSphere Application Server and deploy Federation Web Services

   If you are using the SPS federation gateway, the Federation Web Services application is already deployed.

2. Check that the AgentConfigLocation parameter in the AffWebServices.properties file is set to the full path to the WebAgent.conf file. Ensure that the syntax is correct and the path appears on one line in the file.

   The AffWebServices.properties file contains the initialization parameters for Federation Web Services. This file is located in the one of the following directories:

   • web_agent_home/affwebservices/WEB-INF/classes
   • sps_home/secure-proxy/Tomcat/webapps/affwebservices/WEB-INF/classes
   • web_agent_home

     Represents the installed location of the Web Agent

   • sps_home

     Represents the installed location of the SPS federation gateway

3. Enable error and trace logging for Federation Web Services application. Logging is enabled in the LoggerConfig.properties file. The logs enable you to see the communication between the producing authority and the consuming authority.
   • Error logging is recorded in the affwebserv.log file, the default error log file.
   • Trace logging is recorded in the FWSTrace.log, the default trace log file.
4. Test Federation Web Services by opening a Web browser and entering the following link:

   http://fqhn:port_number/affwebservices/assertionretriever

   where fqhn is the fully-qualified host name and port_number is the port number of the server where the Federation Web Services application is installed.

   For example:

   http://myhost.ca.com:81/affwebservices/assertionretriever

   If Federation Web Services is operating correctly, you should see a message that reads:

   Assertion Retrieval Service has been successfully initialized.
   The requested servlet accepts only HTTP POST requests.
   

   This message indicates that Federation Web Services is listening for data activity. If Federation Web Services is not operating correctly, you will get a message that the Assertion Retrieval Service has failed. In case of failure, check the Federation Web Services log.